Privacy Policy

01 Introduction

Spade66 ("we", "us", "the Company", "Spade66") operates the online sports betting and live casino platform accessible at spade66.cam ("the Platform"). This Privacy Policy ("Policy") describes how we collect, receive, use, store, share, transfer, and process the personal data of individuals ("you", "Player", "User") who access or use the Platform.

This Policy applies to all personal data processed in connection with your use of the Spade66 Platform, including data collected through account registration, deposits and withdrawals, gaming activity, customer support interactions, and any marketing communications you consent to receive.

By registering an account on or using the Spade66 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. This Policy should be read together with our Terms & Conditions and Responsible Gambling Policy.

02 Definitions

In this Privacy Policy, the following terms carry the meanings defined below:

• "Personal Data" means any information that identifies or can be used to identify a natural person, directly or indirectly — including name, identification number, contact details, financial information, IP address, device identifiers, and behavioural data.
• "Processing" means any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing personal data — in this case, Spade66.
• "Data Processor" means any third party that processes personal data on behalf of Spade66, under written instruction and bound by data protection obligations.
• "KYC" means Know Your Customer — the identity, age, and source-of-funds verification process required to activate full account functionality.
• "Cookies" means small text files placed on your device by the Platform to enable functionality and collect usage data.

03 Personal Data We Collect

Spade66 collects the following categories of personal data in connection with your use of the Platform:

04 How Personal Data Is Collected

We collect personal data through the following means:

• Direct interactions: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting our support team, or responding to surveys.
• Automated technologies: Cookies, server logs, and similar tracking tools that collect technical and usage data as you interact with the Platform.
• Third-party sources: Identity verification providers, payment processors (including DuitNow, FPX, and Malaysian bank partners such as Maybank, CIMB, and Public Bank), fraud detection services, and publicly available sources, where we are permitted to do so by law.
• Gaming activity: Data generated automatically as a result of your play, including bet placement records, game outcomes, and session data.

05 Data Processing & Use

Spade66 uses your personal data for the following purposes:

1. Account management: Creating and maintaining your Spade66 account, verifying your identity and age (21+ requirement), and managing your account settings.
2. Transaction processing: Processing deposits and withdrawals via your chosen Malaysian payment method, recording transaction history, and resolving payment disputes.
3. Legal and regulatory compliance: Fulfilling KYC obligations, conducting anti-money laundering (AML) checks, complying with financial crime reporting requirements, and responding to lawful requests from competent authorities.
4. Fraud prevention and security: Monitoring for suspicious activity, preventing unauthorised access, and protecting the integrity of the Platform and all Players.
5. Responsible gambling: Monitoring usage patterns for indicators of problem gambling, applying limits you have set, and intervening proactively where required under our responsible gambling obligations.
6. Customer support: Responding to your enquiries, resolving complaints, and maintaining records of support interactions for quality assurance.
7. Platform improvement: Analysing aggregated usage data to improve Platform performance, user experience, and game offerings.
8. Marketing communications: Sending promotional offers and relevant updates — only where you have provided explicit consent to receive such communications, and always with an easy opt-out mechanism.

06 Legal Basis for Processing

Spade66 processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to enter into and perform our contract with you — including account creation, KYC verification, and transaction processing.
• Legal obligation: Processing required to comply with applicable laws and regulations, including AML obligations, age verification requirements, and cooperation with competent authorities.
• Legitimate interests: Processing for our legitimate interests in fraud prevention, Platform security, and service improvement — provided these interests are not overridden by your privacy rights.
• Consent: Processing for direct marketing purposes, which is carried out only where you have given your explicit, freely given, and withdrawable consent.

07 Data Sharing & Disclosure

Spade66 does not sell, rent, or trade your personal data. We may share your data with the following categories of recipients, only to the extent necessary for the stated purpose:

• Payment service providers: Malaysian payment partners including DuitNow, FPX operators, and authorised e-wallet providers (Touch 'n Go eWallet, Boost, GrabPay), solely for the purpose of processing transactions.
• Identity verification providers: Third-party KYC and AML service providers engaged to verify your identity and conduct required compliance checks.
• Game content providers: Providers of casino games and sports data whose technology is integrated into the Platform, where technically necessary.
• IT and infrastructure providers: Hosting, security, and analytics service providers who process data on our behalf under strict data processing agreements.
• Regulatory and law enforcement authorities: Where we are legally required to disclose your data to comply with applicable law, respond to a court order, or cooperate with a regulatory investigation.
• Group companies: Other entities within the Spade66 corporate group, where relevant to the operation of the Platform, subject to equivalent data protection standards.

08 Cookies & Tracking Technologies

The Spade66 Platform uses cookies and similar technologies to operate core functionality, remember your preferences, measure Platform performance, and support responsible gambling monitoring. The categories of cookies we use include:

• Strictly necessary cookies: Required for the Platform to function, including session management and security features. These cannot be disabled.
• Functional cookies: Remember your preferences and settings (such as language and display options) to improve your experience.
• Analytical cookies: Collect anonymised data about how Players use the Platform — pages visited, session length, and feature usage — to help us improve the service.
• Responsible gambling cookies: Track session duration and frequency to support the operation of responsible gambling tools and alerts.

You may configure your browser settings to refuse certain cookies; however, disabling strictly necessary cookies may prevent the Platform from functioning correctly. We do not use third-party advertising cookies or cross-site tracking technologies for the purpose of serving advertisements on other websites.

09 Data Retention

We retain your personal data for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable law or regulation. The following indicative retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of 5 years following account closure, in accordance with AML and financial record-keeping obligations.
• Transaction records: Retained for a minimum of 7 years from the date of the transaction, as required under applicable financial regulations.
• Support and communications records: Retained for up to 3 years from the date of the last interaction, unless a longer period is required for dispute resolution or regulatory purposes.
• Marketing preferences: Retained until you withdraw your consent or close your account.
• Technical and usage data: Retained in aggregated or anonymised form for ongoing Platform analysis; identifiable data retained for up to 24 months.

When data is no longer required, we securely delete or anonymise it in accordance with our internal data lifecycle procedures.

10 Data Security

Spade66 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform.
• Encrypted storage of sensitive personal and financial data at rest.
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis.
• Regular security assessments, penetration testing, and vulnerability management.
• Two-factor authentication (2FA) options for Player accounts to reduce the risk of unauthorised access.
• Incident response procedures to detect, assess, and address any data breach in a timely manner.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, Spade66 will notify affected Players and relevant authorities as required by applicable law.

11 Your Rights as a Data Subject

Subject to applicable law, you may have the following rights in relation to your personal data held by Spade66:

• Right of access: The right to request a copy of the personal data we hold about you and information about how it is processed.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data without undue delay.
• Right to erasure: The right to request deletion of your personal data in certain circumstances, subject to our legal retention obligations.
• Right to restriction: The right to request that we restrict the processing of your personal data in certain circumstances.
• Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format where processing is based on your consent or a contract.
• Right to object: The right to object to processing based on legitimate interests or direct marketing purposes.
• Right to withdraw consent: Where processing is based on your consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact our support team via live chat or at the email address provided in Section 15 below. We will respond to all valid requests within 30 days. In certain circumstances, we may be unable to fulfil a request — for example, where we are required by law to retain data — and we will explain the reason in our response.

12 Minors & Age Verification

The Spade66 Platform is strictly for individuals aged 21 years and above. We do not knowingly collect personal data from anyone under the age of 21. Identity and age verification is a mandatory component of our account registration and KYC process, and we employ automated and manual checks to enforce this requirement.

If we become aware that we have inadvertently collected personal data from an individual under the age of 21, we will close the relevant account, void any associated activity, and delete the personal data in question promptly. If you believe a minor has opened an account on the Platform, please contact us immediately so that we can take appropriate action.

13 International Data Transfers

Spade66 primarily processes personal data in Malaysia and within the region. Where personal data is transferred outside of Malaysia — for example, to cloud hosting infrastructure or third-party service providers operating in other jurisdictions — we take steps to ensure that appropriate safeguards are in place to protect your data, including contractual protections with receiving parties consistent with applicable data protection standards.

We do not transfer your personal data to jurisdictions that lack adequate data protection frameworks without implementing appropriate transfer mechanisms.

14 Amendments to This Policy

Spade66 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or the Platform's functionality. Where changes are material, we will notify registered Players via email or in-Platform notification at least 7 days prior to the revised Policy taking effect.

The "Last Updated" date at the top of this Policy reflects the most recent revision. We encourage you to review this Policy periodically. Your continued use of the Platform following the effective date of any revision constitutes acceptance of the updated Policy.

15 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by Spade66, please contact us. Our dedicated support team handles all data-related enquiries and aims to respond promptly.

Support email: [email protected]
Head office: Kuala Lumpur, Malaysia
Live chat: Available 24/7 via the Platform